CVE-2013-4317 | BDVDB-2026-96077 Detail

ApacheApache CloudStack

Description#

In Apache CloudStack 4.1.0 and 4.1.1, when calling the CloudStack API call listProjectAccounts as a regular, non-administrative user, the user is able to see information for accounts other than their own.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/oss-sec/2018/q1/1

Exploit#

No public exploit known

History#

Version 12018-02-06Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.